gh-pr
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates commands for the GitHub CLI tool to create pull requests with specific titles and body content.
- [PROMPT_INJECTION]: The skill processes untrusted input to generate the pull request body, creating a surface for indirect prompt injection. However, it mitigates this risk by utilizing a quoted HEREDOC ('EOF') in the command template, which prevents the shell from interpreting the body content as executable code or variables.
Audit Metadata